Anyone here do a lot with osquery on AWS? Any pointers or best practices on dealing with initial state on ephemeral instances without cluttering up logs as instances are killed / new ones spin up?